Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: McNzcxizb2axMxJpqijTb9iAZak0vK1MrMrOKc8j7jo=
Subject key identifier: 97:9D:1B:9A:31:91:E3:C8:5A:0E:F8:39:24:DC:1C:77:73:21:E0:09
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 01984A7804B3447A59A2C3D84EE78C3152D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:35 +0000
Manifest this update: Sun 27 Jul 2025 06:00:35 +0000
Manifest next update: Mon 28 Jul 2025 06:00:35 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: KidtiASlNiVhxmyamXvh9Lm5vWgseG3m3dAPx6LApqY=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:04:b3:44:7a:59:a2:c3:d8:4e:e7:8c:31:52:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Jul 27 06:00:35 2025 GMT
Not After : Jul 28 06:00:35 2025 GMT
Subject: CN=979d1b9a3191e3c85a0ef83924dc1c777321e009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:3c:84:21:fd:9f:71:41:18:f5:c3:9c:fd:
01:ba:59:b0:42:54:28:7c:ac:6e:85:58:d9:7a:3d:
ae:0f:86:34:05:52:ec:c7:4a:59:e1:c9:02:fe:fb:
3d:bd:32:e1:ff:be:6c:ff:0d:bf:ae:a9:6d:06:4b:
06:0f:55:dc:ec:f0:1f:76:29:0a:db:69:27:60:de:
11:31:82:7d:77:4c:77:c9:f5:3c:ce:06:1f:55:83:
6f:23:69:d1:6b:4b:28:5f:05:be:16:2f:d0:82:7a:
17:ab:3f:c7:07:38:d4:a9:67:1c:ca:2d:9c:35:8f:
7d:cc:4d:54:f3:77:81:5b:31:ce:c5:92:81:a6:a7:
18:1b:57:f4:71:d2:92:c5:99:0c:58:ef:31:7c:d2:
91:23:86:64:fd:91:ec:fc:c2:cf:a4:d9:96:82:55:
f1:50:97:25:02:ad:5a:12:ad:58:fc:15:44:2a:36:
6d:2f:7a:6f:51:42:ea:3b:17:9a:d0:64:7f:90:4f:
9c:9d:ba:8c:b3:17:d3:fb:41:70:d7:ee:16:e3:eb:
0a:39:e5:61:c0:da:db:7f:9f:66:c2:79:89:c2:55:
c5:ee:b9:6e:e8:5d:2c:63:1b:29:ca:29:4e:91:95:
37:35:27:f5:c2:2a:b4:61:2a:84:ac:39:04:d8:e5:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:1B:9A:31:91:E3:C8:5A:0E:F8:39:24:DC:1C:77:73:21:E0:09
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:47:67:dd:5d:9c:a2:30:7b:68:ae:6b:79:93:4d:14:b2:7e:
1d:a2:b2:6f:32:38:dd:71:3d:3c:63:d3:e3:54:dc:ab:49:ff:
e5:9b:a8:64:c0:38:ed:bd:48:5c:4e:ac:07:39:29:6e:23:bc:
f0:db:df:48:f7:6d:b3:c1:b4:54:5e:e2:5d:7e:b4:b5:a9:52:
21:7b:04:2d:f8:a7:03:40:78:a1:f7:7b:13:86:03:fc:87:c6:
bf:66:aa:d2:b4:79:6a:cb:46:68:66:70:3f:8c:c2:53:46:70:
3f:84:be:cb:18:cb:81:b2:e3:f9:14:31:81:81:6f:6b:91:c6:
6b:ba:ae:a0:8f:73:ef:a0:b8:c1:fa:92:ae:f8:4e:e7:6f:6e:
b8:9a:02:35:cb:9a:31:b2:55:b4:fb:55:70:21:a0:69:fc:14:
85:b0:58:fc:79:bf:1e:b4:2e:30:f3:17:98:cc:64:07:4c:6f:
c4:b0:60:09:b6:24:e4:95:15:17:56:fd:20:1a:4e:f8:87:d4:
fd:3d:f4:76:18:3b:5e:2d:af:e3:37:aa:40:a1:7e:3e:36:8e:
d9:73:58:97:39:60:00:5f:78:de:65:5d:a7:8c:84:7e:c9:80:
5c:9a:ec:a5:7b:f2:d3:42:a8:fe:5b:b5:ff:8d:3d:32:9f:54:
4d:5f:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:54 2025 by rpki-client